Network Security

Load Balancing PIX

Hi All, we have the following scenario. 2 Firewall Active/Standby are facing 2 routers configured with HSRP.is it possible in order to achieve LOAD Balancing for certain destination traffic to have 2 static routes having same AD but different next ho...

FWSM: DHCPD

DHCPD is not configuring on failover FWSM. All other config is syncing between both FWSM.dhcpd address 10.27.0.10-10.27.1.9 INSIDEdhcpd lease 3600dhcpd ping_timeout 50dhcpd option 150 ip 10.27.2.10 10.27.2.11dhcpd enable INSIDEFWSM Firewall Version 4...

Secure Active Directory Authentication thru ASA

I am working at a client site whom wants to use his Windows Domain Controllers on his Inside interface on the ASA to Authenticate Domain users whom log into a Web Server on the DMZ interface. This Web Server in the DMZ is configured to use Active Di...

ASDM/ASA error message

I have been receiving the following message from ASDM when attempting to launch it"ASDM is unable to read the configuration from the ASA, Please check the configuration and connection" I was able to launch it from the ASA, why can't it connect back f...

ip local pool on ASA and registering in DNS

All,We have an issue where some of the vpn clients register in DNS and some don't when connecting to a 5520. Is there an option on the 5520 that will always register for the client?We have a local pool on the asa that hands out addresses. The clients...

Resolved! no communication between same security interfaces

I cannot open shared network drive and ping between two interfaces with same security level. interface Vlan1 nameif inside security-level 100 ip address 192.168.1.1 255.255.255.0!interface Vlan3 nameif inside_wlan security-level 100 ip address 10.10....

Redundant installation with 4200 sensors

HiWe are in a process of starting to work on a design with several IPS 4270. The demand is to make the design redundant and with high availability. As I am aware of there no redundant support (e.g. no protocol support like HSRP) within the IPS itself...

NAC Load Balancing

Hi there,I know this question was asked before by someone else and is still un-answered. Has anyone done NAC Load Balancing? Any link on the best practice? I am doing OOB-L3-Real IP.Let me clarify the question.The highest end NAS (3350) can support o...

Inspection Issues with 12.4 T Code Versions

We are in the process of looking for a code to begin ZBF implementation. Currently we have tried about 4 versions of 12.4 T code lines and have encountered the same issue each time. If we have two subnets configured on the same interface, with insp...

ASA - Deny TCP (no connection)

Hello,Scratching my head with this problem.Email notifications are not getting generated from the inside network. Quick Topology:Inside -> FWSM -> 6500 (NAT) -> 2nd Level ASA -> 1st Level ASA (PAT)The SMTP access is allowed throughout. I can see Buil...

ASA more than one pre-shared with dynamic crypto map

Hi, how to have more than one pre-shared for dynamic crypto map, in ASA ?I need a different pre-shared, one for every hub routerthanks

WRT54GS VPN Connection Issues: Error code 87

Hello experts, I have unsuccessfully tried to help my wife connect her Windows XP laptop to her work VPN over our home wi-fi network. I have a WRT54GS v.4 router with the latest firmware, WPA2 encryption. It connects to the VPN just fine but is unabl...

Resolved! Internal systems using public NAT IP address to talk to each other

I have the following static addresses translations configured and access-list for inbound UDP and TCP services.Is there a way in addition to a one to one nat and an access rule to allow the systems below to communicate over the public IP addresses an...

Resolved! It seems TCP SYN Attack!

Hello,We have very huge number of TCP connections we can see at PIX 525 firewall to Anti-Spam mail gateway. Here is sample of show connection to Anti-Spam IP X.X.X.X; by the way the attacker is using many src IP addresses:============================...